[Git][security-tracker-team/security-tracker][master] CVE-2018-8883/nasm fixed via new upstream version in unstable

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ea5279c7 by Salvatore Bonaccorso at 2018-11-18T08:38:05Z
CVE-2018-8883/nasm fixed via new upstream version in unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -27096,11 +27096,12 @@ CVE-2016-10717 (A vulnerability in the encryption and permission implementation
 CVE-2018-8884
 	RESERVED
 CVE-2018-8883 (Netwide Assembler (NASM) 2.13.02rc2 has a buffer over-read in the ...)
-	- nasm <unfixed> (low; bug #894847)
+	- nasm 2.14-1 (low; bug #894847)
 	[stretch] - nasm <no-dsa> (Minor issue)
 	[jessie] - nasm <no-dsa> (Minor issue)
 	[wheezy] - nasm <ignored> (Minor issue)
 	NOTE: https://bugzilla.nasm.us/show_bug.cgi?id=3392447
+	NOTE: https://github.com/netwide-assembler/nasm/commit/3c755dac88039b718d52ef56e8f74b5f65f3b55b
 CVE-2018-8882 (Netwide Assembler (NASM) 2.13.02rc2 has a stack-based buffer under-read ...)
 	- nasm 2.14-1 (low; bug #894846)
 	[stretch] - nasm <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ea5279c78d04003d25f5772631e7156740554778

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ea5279c78d04003d25f5772631e7156740554778
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181118/c8bcca67/attachment.html>